Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3136382e302e3137322e302f32322d3234203d3e20323635333033.roa
File:                     3136382e302e3137322e302f32322d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          DyIEWQ6k9AX5mn0VA/TQcGqy8Nxpzc5cU0tPcXaQTzA=
Subject key identifier:   77:85:9C:4D:AE:46:B4:59:46:CB:8A:AC:EB:6C:4F:9F:05:A4:E9:E7
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       68A7F1CB35F77A2AE41906A79FDA480314A757D8
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3136382e302e3137322e302f32322d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:26:39 +0000
ROA not before:           Wed 10 Jan 2024 17:21:39 +0000
ROA not after:            Wed 08 Jan 2025 17:26:39 +0000
asID:                     265303
IP address blocks:        168.0.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a7:f1:cb:35:f7:7a:2a:e4:19:06:a7:9f:da:48:03:14:a7:57:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:21:39 2024 GMT
            Not After : Jan  8 17:26:39 2025 GMT
        Subject: CN=77859C4DAE46B45946CB8AACEB6C4F9F05A4E9E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:68:33:73:c1:94:d7:25:99:68:0e:9b:b1:
                    a4:f8:16:b3:f1:f8:a5:54:0a:26:61:b6:32:11:38:
                    63:71:c2:73:a6:b5:36:8d:23:df:0f:02:33:a5:71:
                    1e:1c:b6:ec:53:db:44:3f:6d:4b:90:08:db:23:97:
                    a3:79:27:22:ed:38:e7:ef:3b:ef:da:6f:9b:f9:d0:
                    a9:7b:6e:af:40:e3:77:80:f1:a4:16:62:eb:f2:70:
                    66:99:b7:ae:e3:2f:0a:c2:6d:79:e9:87:04:37:ed:
                    54:64:b0:67:4e:04:35:59:ec:60:ed:d2:31:79:f9:
                    17:ca:8c:c2:0a:d3:78:75:aa:55:85:41:bf:b5:01:
                    0e:e8:f0:3e:4e:09:91:c5:b4:07:67:c3:2e:6c:18:
                    69:2e:87:57:5a:7c:65:5d:de:34:ec:79:5e:b9:41:
                    40:59:78:51:c6:8f:80:9e:d7:e8:37:4b:93:5f:cb:
                    e4:2e:1f:53:1b:d7:54:91:7c:e6:48:68:5c:cd:09:
                    08:33:d8:f8:64:04:a6:38:12:3e:c7:10:e0:2b:03:
                    7e:e5:67:de:27:c5:26:10:7f:f4:a7:ba:a9:8c:b2:
                    c5:9d:c4:a6:f5:32:54:6c:32:60:4c:d6:d4:2c:4c:
                    82:1d:e4:61:cc:3e:62:f3:c2:96:22:15:87:df:f2:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:85:9C:4D:AE:46:B4:59:46:CB:8A:AC:EB:6C:4F:9F:05:A4:E9:E7
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3136382e302e3137322e302f32322d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:77:1b:b5:67:06:84:c5:26:32:b8:9e:b5:84:7c:f8:bd:
         29:1d:a9:61:ff:db:bb:1a:ce:05:e3:9e:22:9e:50:0f:c6:0e:
         f3:ac:22:ed:10:31:7b:7f:6e:51:58:e1:71:53:a0:71:a9:7b:
         b0:6a:0a:26:16:57:74:a1:93:b9:8b:a7:bf:82:76:e9:4d:82:
         d5:53:bd:24:99:70:5f:3d:2d:b7:92:24:4e:c7:41:09:75:26:
         38:2e:a8:f9:a3:fc:e3:d0:36:82:ec:48:8b:f6:bb:4d:0e:66:
         4f:ec:d0:c2:9d:2f:63:4a:47:c3:b3:88:ed:72:15:97:52:05:
         71:cc:4c:e3:b4:0e:66:f3:04:89:92:61:9b:8b:6b:1b:43:b3:
         08:2d:e4:6c:82:2b:bd:20:d9:a5:28:94:e9:54:41:33:dc:97:
         b7:cf:72:e6:38:5c:6d:48:e5:cd:bc:96:6e:65:1f:11:65:54:
         cb:e7:b2:1e:af:bf:9b:8a:d1:9c:71:5d:8f:4b:c4:36:62:0f:
         b4:da:2c:39:28:70:cf:d2:12:de:a7:0a:c4:a3:c5:f4:c5:c7:
         2c:b8:93:57:60:ca:8e:40:83:e5:cf:b4:20:64:d1:e7:af:be:
         ca:66:f6:40:c5:87:58:2d:c6:41:15:ab:b0:22:68:4d:54:37:
         37:01:fb:3f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaKfxyzX3eirkGQann9pIAxSnV9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzNjQzNDE1RDREQ0Q0Q0QwREQ0RTQxMUQxQTI2MUZG
NDdBNUJERTAeFw0yNDAxMTAxNzIxMzlaFw0yNTAxMDgxNzI2MzlaMDMxMTAvBgNV
BAMTKDc3ODU5QzREQUU0NkI0NTk0NkNCOEFBQ0VCNkM0RjlGMDVBNEU5RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUWgzc8GU1yWZaA6bsaT4FrPx
+KVUCiZhtjIROGNxwnOmtTaNI98PAjOlcR4ctuxT20Q/bUuQCNsjl6N5JyLtOOfv
O+/ab5v50Kl7bq9A43eA8aQWYuvycGaZt67jLwrCbXnphwQ37VRksGdOBDVZ7GDt
0jF5+RfKjMIK03h1qlWFQb+1AQ7o8D5OCZHFtAdnwy5sGGkuh1dafGVd3jTseV65
QUBZeFHGj4Ce1+g3S5Nfy+QuH1Mb11SRfOZIaFzNCQgz2PhkBKY4Ej7HEOArA37l
Z94nxSYQf/SnuqmMssWdxKb1MlRsMmBM1tQsTIId5GHMPmLzwpYiFYff8nPvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUd4WcTa5GtFlGy4qs62xPnwWk6ecwHwYDVR0j
BBgwFoAURDZDQV1NzUzQ3U5BHRomH/R6W94wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW43RnZEM1F4UExFWHM4SHBnV1V1cEhxQmhQVnNKR0tIOEdFa1JwVnB0
N1gvMC80NDM2NDM0MTVENERDRDRDRDBERDRFNDExRDFBMjYxRkY0N0E1QkRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0MzY0MzQxNUQ0RENENENE
MERENEU0MTFEMUEyNjFGRjQ3QTVCREUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzluN0Z2RDNReFBMRVhzOEhwZ1dVdXBIcUJoUFZzSkdLSDhHRWtScFZwdDdYLzAv
MzEzNjM4MmUzMDJlMzEzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1
MzMzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqACsMA0GCSqGSIb3DQEBCwUAA4IBAQBbMncbtWcG
hMUmMrietYR8+L0pHalh/9u7Gs4F454inlAPxg7zrCLtEDF7f25RWOFxU6BxqXuw
agomFld0oZO5i6e/gnbpTYLVU70kmXBfPS23kiROx0EJdSY4Lqj5o/zj0DaC7EiL
9rtNDmZP7NDCnS9jSkfDs4jtchWXUgVxzEzjtA5m8wSJkmGbi2sbQ7MILeRsgiu9
INmlKJTpVEEz3Je3z3LmOFxtSOXNvJZuZR8RZVTL57Ier7+bitGccV2PS8Q2Yg+0
2iw5KHDP0hLepwrEo8X0xccsuJNXYMqOQIPlz7QgZNHnr77KZvZAxYdYLcZBFauw
ImhNVDc3Afs/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org